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AMENDMENT TO CLAIMS: 

1. (Currently Amended) A method for creating anonymity in collecting patient data, the method 
comprising: 

receiving a medical report for a patient including patient identification data; 

searching a patient record-fet-an-afiottyBious patka*l-klenlifief corresponding to said 
patient for an anonym ou s patient ide ntifier w herein said naticQ|jc ceord inglu dcso ng or ni orcjpj' 
Ihc .patient identifica tion data , said searching returns said anonymous patient identifier in 
response to locating said anonymous patient identifier and said searching returns a null value in 
response lo not locating said anonymous patient identifier; 

creating said anonymous patient identifier corresponding to said patient apd storing the 
nnonyrnoj^ in the p atient record if said searching returns said null value; 

adding said anonymous patient identifier to said medical report; 

removing said patient identification data from said medical report; and 

transmitting said medical report to a data repository in response to said removing. 

2. (Original) The method of claim 1 wherein said anonymous patient identifier includes a 
linear transformation of a media access control address component, a date/time component and 
an anonymity supplement component. 

3. (Original) The method of claim 2 wherein said date/time component includes a month, 
a day, a year, an hour, a minute, and a second corresponding to when said patient was first 
admitted. 

4. (Original) The method of claim 2 wherein said anonymity supplement component 
includes a rotating number that is incremented each time a new said anonymity supplement is 
created. 

5. (Original) The method of claim 2 wherein said linear transformation includes a non- 
singular matrix. 
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6. (Original) The method of claim 5 wherein said matrix is a three by three matrix. 

7. (Original) The method of claim 5 wherein said matrix is a four by four matrix. 

8. (Original) The method of claim 5 wherein said matrix is an n by n matrix. 

9. (Original) The method of claim 1 wherein said patient identification data includes one 
of name, medical record number and social security number. 

10. (Original) The method of claim 1 wherein said anonymous patient identifier is in an 
encrypted format on said patient record. 

1 1 . (Original) The method of claim 1 wherein said anonymous patient identifier is in a 
unencrypted format on said medical report. 

12. (Currently Amended) The method of claim 1 wherein said creating and stori ng 
inclndersaid-tmewyrnotts^ienttdeHtifier-ineltides} 

receiving a media access control address; 

applying a first linear transformation matrix to said media access control address 
resulting in a transformed media access control address; 

receiving a date/time; 

applying a second linear transformation matrix to said date/time resulting in a 
traits formed dale/time; 

receiving an anonymity supplement; 

applying a third linear transformation matrix to said anonymity supplement resulting in a 
transformed anonymity supplement concatenating said transformed media access control 
address, said transformed date/time and said transformed anonymity supplement resulting in said 
anonymous patient identifier; 

encrypting said anonymous patient identifier resulting in an encrypted anonymous patient 
identifier; and 
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storing said encrypted anonymous patient identifier in said patienl record. 

13. (Original) The method of claim 12 wherein said first linear transformation matrix, 
said second linear trans formation matrix and said third linear transformation matrix are the same 
matrices. 

14. (Original) The method of claim 12 wherein two of said first linear transformation 
matrix, said second linear transformation matrix and said third linear transformation matrix are 
different matrices. 

15. (Currently Amended) A method for creating anonymity in collecting patient data, 
the method comprising: 

receiving a medical report for a patient including patient identification data; 

searching a patient rccord4w-an^ne*^^ corresponding to said 

patient form a nonymous oal icnt identifi er wherein said iiMieQL^P^^^ 
the patien t id entification d aliu said searching returns said anonymous patient identifier in 
response to locating said anonymous patient identifier and said searching returns a null value in 
response to not locating said anonymous patient identifier; 

creating said anonymous patient identifier corresponding to said patient if said searching 
rclurns said null value, wherein said creating includes: 

receiving a media access control address; 

applying a first linear transformation matrix to said media access control address 
resulting in a transformed media access control address; 

receiving a date/time; 

applying a second linear transformation matrix to said date/time resulting in a 
transformed date/time; 

receiving an anonymity supplement; 
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applying a third linear trans formation matrix to said anonymity supplement 
resulting in a transformed anonymity supplement; 

concatenating said transformed media access control address, said transformed date/time 
and said transformed anonymity supplement resulting in said anonymous patient identifier; 

encrypting said anonymous patient identifier resulting in an encrypted anonymous 
patient identifier; and 

storing said encrypted anonymous patient identifier in said patient record.; 

adding said anonymous patient identifier to said medical report; 

removing said patient identification data from said medical report; and 

transmitting said medical report to a data repository in response to said removing. 

16. (Currently Amended) A system for creating anonymity in collecting patient data, the 
system comprising: 

a network; and 

a host system in communication with said network, said host system including software 
to implement the method comprising; 

receiving over said network a medical report for a patient including patient 
identification data; 

searching a patient rccord-fer-an aiienymous-pati^w idevittfiei-- corresponding to 
said patient (or^ anonymous said paijentj^cord, includc s.onc 

nrmmg of the patien t identificat ion dnta,_sajd_searching returns said anonymous patient 
identifier in response to locating said anonymous patient identifier and said searching 
returns a null value in response to not locating said anonymous patient identifier; 
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creating said anonymous patient identifier corresponding to said patient and 
ilQnmUlir.^r^^^a^i enl idcnlilier in the oatisntrcc.Qid if said searching returns said 

null value; 

adding said anonymous patient identifier to said medical report; 

removing said patient identification data from said medical report; and 

transmitting said medical report to a data repository over said network in response 
to said removing. 

17. (Original) The system of claim 16 wherein said network is an Internet. 

18. (Original) The system of claim 16 wherein said network is an intranet. 

19. (Currently Amended) The system of claim 16 wherein said creating and slorin & 
jncludeisaitkm»nynK>^ 

receiving a media access control address; 

applying a first linear transformation matrix to said media access control address 
resulting in a transformed media access control address; 

receiving a date/lime; 

applying a second linear transformation matrix to said date/time resulting in a 
transformed date/time; 

receiving an anonymity supplement; 

applying a third linear transformation matrix to said anonymity supplement resulting in a 
transformed anonymity supplement; 

concatenating said transformed media access control address, said transformed date/time 
and said transfonned anonymity supplement resulting in said anonymous patient identifier; 
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encrypting said anonymous patient identifier resulting in an encrypted anonymous patient 
identifier; and 

storing said encrypted anonymous patient identifier in said patient record. 

20. (Currently Amended) A computer program product for creating anonymity in 
collecting patient data, the product comprising: 

a storage medium readable by a processing circuit and storing instructions for execution 
by the processing circuit For: 

receiving a medical report for a patient including patient identification data; 

searching a patient record-foMiMuettymous >patk^4ejrtifi« corresponding to 
said patent fornn anonym ous patien t identifier wherein said patLcnLtecQrd incjsiflsg, one 
ormor c of the p atient identifica tio n data, said searching returns said anonymous patient 
identifier in response to locating said anonymous patient identifier and said searching 
returns a null value in response to not locating said anonymous patient identifier; 

creating said anonymous patient identifier corresponding to said patient anil 
storing th e anonymo us patient identifier in the pa tient recor d if said searching returns said 
null value; 

adding said anonymous patient identifier to said medical report; 
removing said patient identification data from said medical report; and 
transmitting said medical report to a data repository in response to said removing. 

21. (Currently Amended) The storage medium of claim 20 wherein said creating and 

.siori iygsnid-ayi^nymons- patie nt ide ntifier includes: 

receiving a media access control address; 

applying a first linear transformation matrix to said media access control address 
resulting in a transformed media access control address; 
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receiving a date/tiine; 

applying a second linear transformation matrix to said date/time resulting in a 
transformed date/time; 

receiving an anonymity supplement; 

applying a third linear transformation matrix to said anonymity supplement resulting in a 
transformed anonymity supplement; 

concatenating said transformed media access control address, said transformed date/time 
and said transformed anonymity supplement resulting in said anonymous patient identifier; 

encrypting said anonymous patient identifier resulting in an encrypted anonymous patient 
identifier; and 

storing said encrypted anonymous patient identifier in said patient record. 

22. (Currently Amended) An anonymous patient identifier encoding format for creating 
anonymity in collecting patient data, the format comprising: 

a unique system identifier; 

a patient identifier including a date/time component and an additional component to 
ensure uniqueness within said system; and wherein: 

said anonymous patient identifier is stored in an encrypted format on a patient 
recordihaJjiicMcs^^ md 

said anonymous patient identifier is stored in an unencrypted format on a medical 

report. 

23. (Original) The encoding format of claim 22 wherein said unique system identifier is 
a linear trans formali on applied to a media access control address. 
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24. (Original) The encoding format of claim 22 wherein said date/time component is a 
linear transformation applied to the concatenation of a month, day, year, hour, minute and second 
corresponding to when said patient was first admitted. 

25. (Original) The encoding format of claim 22 wherein said additional component 
includes a linear transformation applied to the concatenation of a rotating number thai is 
incremented each time a new said anonymity supplement is created. 
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